In a move to secure its massive user base, Google has released a critical stable channel update for its Chrome browser, addressing a total of 11 vulnerabilities. Among these fixes is a high-severity zero-day flaw that has already been identified as being under active exploitation in the wild. This latest update marks the fifth time […]
Urgent Security Alert: Apple Patches Two Actively Exploited Zero-Day Vulnerabilities in macOS and iOS
In a stark reminder of the persistent threats facing modern computing ecosystems, Apple has issued emergency security updates for its macOS, iPhone, and iPad platforms to address two critical zero-day vulnerabilities. These flaws, which are currently being leveraged by threat actors in the wild, grant attackers the ability to execute arbitrary code with kernel-level privileges—effectively […]
CISA Issues Urgent Patch Directive: Four Critical Vulnerabilities Added to Known Exploited List
In a significant move to bolster the security posture of both federal and private-sector digital infrastructure, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has formally added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. These additions represent a severe escalation in threat activity, as attackers are already weaponizing these flaws to gain […]
Critical Security Alert: CISA Mandates Urgent Patching for Actively Exploited Windows Shell and Ivanti Vulnerabilities
In a significant escalation of cybersecurity posture, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive to address two high-severity vulnerabilities currently being leveraged by malicious actors in the wild. The agency has formally added these flaws—a Windows Shell command injection vulnerability (CVE-2026-96951) and an authentication bypass issue in Ivanti Connect […]
Critical Security Alert: CISA Mandates Patching for Exploited Ivanti Connect Secure Vulnerability (CVE-2026-104935)
In a move underscoring the persistent threat landscape facing enterprise-grade VPN and gateway infrastructure, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added a high-severity vulnerability in Ivanti Connect Secure (ICS) to its Known Exploited Vulnerabilities (KEV) catalog. The flaw, tracked as CVE-2026-104935, carries a CVSS score of 8.6 and has been confirmed […]
Critical Severity 10.0 Vulnerability in WordPress Bricksforge Plugin Actively Exploited in the Wild
Global Cybersecurity Alert: Website administrators utilizing the WordPress ecosystem are facing an urgent security crisis. Hackers are currently and actively exploiting a maximum-severity remote code execution (RCE) vulnerability in Bricksforge, a popular and powerful third-party companion plugin for the Bricks visual builder. Tracked as CVE-2026-85097, this critical flaw has been assigned a 10.0 CVSS score—the […]
CISA Expands Known Exploited Vulnerabilities Catalog Amid Global Crackdown on Chinese State-Linked Espionage Infrastructure
In a significant move to fortify national security against sophisticated foreign cyber espionage, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has formally updated its Known Exploited Vulnerabilities (KEV) catalog. The inclusion of five specific vulnerabilities—impacting ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND—marks a critical pivot in the international effort to neutralize the […]
CISA: Patch actively exploited SolarWinds Serv-U DoS vulnerability (CVE-2026-28318)
A vulnerability (CVE-2026-28318) that can be exploited to crash SolarWinds Serv-U file transfer servers is being leveraged by attackers in the wild, the US Cybersecurity and Infrastructure Security Agency (CISA) confirmed on Friday. The agency has ordered US federal civilian agencies to address it by June 19, 2026, either by implementing a patch or implementing […]